How to: Enable/Generate/Debug Core Dump In Linux?

时间：2014-11-11 22:33:55 阅读：390 评论：0 收藏：0 [点我收藏+]

http://www.itsprite.com/how-to-enablegeneratedebug-core-dump-in-linux/

What is Core Dump?

If the running programs were terminated abnormal or crashed, the memory status ot the program will be recored by OS and saved in a file, this file is called “Core Dump” . We also can think of core dump as “memory snapshots”, but in fact, in addition to the memoryinformation, some crucial state of program will also be dump down, such as register information (including the program pointer, the stack pointer etc.), memory management information, other processor state. Core dump is very helpful for programmers to diagnose and debug the program, since some bugs are difficult to reproduce, such as pointer exception, and we can analyze the core dump file to reproduce that program bugs.

How to generate Core Dump?

Under what circumstances the program terminates abnormally or crashes would happen, if we use the command “kill -9” to kill a process will trigger a core dump? the experiments show that this is impossible.

Linux signal is a kind of asynchronous event handling mechanism, each signal has its default operation, you can view the signal and the default processing way in here. The default action include Ingore (ignore signal ), Stop(suspend process), Terminate (terminate process), and Core(termination and core dump) etc.. If we are using the default action, then, the following signals will produce core dump:

Signal	Action	comment
SIGQUIT	Core	Quit from keyboard
SIGILL	Core	Illegal Instruction
SIGABRT	Core	Abort signal from abort
SIGSEGV	Core	Invalid memory reference
SIGTRAP	Core	Trace/breakpoint trap

Of course, not limited to the above signals. This is why we use “Ctrl+z” to suspend a process or“Ctrl+C” to terminate a process will not generate a core dump, because the former will sendSIGTSTP signal to the process, its default action is to suspend process (Stop Process); the latter will send a SIGINT signal to the process, its default action is to terminate the process (Terminate Process). As mentioned above the “kill -9″ command will issue the SIGKILL signal, which defaults to terminate the process. But if we use the “Ctrl+\” to terminate a process, the process will be issued SIGQUIT signal , it will produce a core dump. There are other situations will produce core dump, such as: program calls abort () function, memory access error, illegal instruction and so on.

Two Examples as below:

1. compare both “Ctrl+C” and “Ctrl +\” in the terminal interface

[root@devops ~]# ulimit -c
0
[root@devops ~]# ulimit -c unlimited
[root@devops ~]# sleep 10
^C
[root@devops ~]# ls
anaconda-ks.cfg install.log install.log.syslog
[root@devops ~]# sleep 10
^\Quit (core dumped)

[root@devops ~]# ls
anaconda-ks.cfg core.2329 install.log install.log.syslog

2. small program generate core dump

#include <stdio.h>

int main()
{
int *null_p = NULL;
*null_p = 10; //write to null pointer memory area,Segmentation fault will happen
return 0;
}

[root@devops ~]# gcc seg.c -o seg
[root@devops ~]# ./seg
Segmentation fault (core dumped)
[root@devops ~]# ls
anaconda-ks.cfg core.2410 install.log install.log.syslog seg seg.c

How to enable Core Dump function in linux?

1. enable core dump

If you enter “ulimit -c” command and get the result value as 0, it indicate that core dump is disabled by default, it would not generate core dump file.

We can use the command “ulimit -c unlimited” to enable the core dump function, and does not limit the core dump file size; if you need to restrict the size of the file, change the “unlimited” as you want to generate the core file maximum size, pay attention to the unit is blocks (KB).

Using the above command will only effective for terminal current environment， if you want to be permanent, you can modify the file /etc/security/limits.conf file. add the below one line:

# /etc/security/limits.conf
#
#Each line describes a limit for a user in the form:
#
#&lt;domain&gt; &lt;type&gt; &lt;item&gt; &lt;value&gt;
<span style="color: #008000;">   *       soft  core    unlimited</span>

2. Change The Saving Location Of Core Dump File

The default generated core file is saved in the executable file’s directory, file name is core.
By modifying the /proc/sys/kernel/core_uses_pid file to generate core file is automatically add pid number.For example: “echo 1 > /proc/sys/kernel/core_uses_pid“, the generated core file will become core.pid, wherein PID represents the process of PID.

How to use gdb to debug Core dump file?

When core dump, use the command “GDB programname corename” to view the core file,